Configure job access_control_list block from a single place outside of job definition
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2025 06:01 AM
Hi all
Is it possible to configure the access_control_list block ((basically that contains permissions)) from a single place outside of Databricks job definition? This is changing as we are re-defining our permissions model, and each time resulting into 100+ jobs definition changes...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2025 07:03 AM - edited 08-28-2025 07:05 AM
Hi @noorbasha534 ,
You can define top-level permissions in your bundle YAML file, this applies them to all jobs and resources, so changes only require a single update, not edits to every job.
https://docs.databricks.com/aws/en/dev-tools/bundles/settings#permissions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-28-2025 08:25 AM
Hello @noorbasha534
If you are trying to alter the permissions across many jobs at scale, I believe there are a couple of options to help speed up the process.
Firstly, creating groups of users should help, as you can then easily change an entire group's permissions at once or add/remove users from the group, which will, in turn, add/remove their user permissions to all jobs granted to the group.
Secondly, if you are looking to change permissions to jobs on mass, I believe you can use the Databricks command line interface (CLI) to programmatically alter the permissions. I found this article, which contains examples of how this can be done: https://docs.databricks.com/aws/en/dev-tools/cli/reference/permissions-commands.
I hope I have understood your problem correctly and been able to help - please let me know how you get on!
Regards - Pilsner